Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PvCPK3GiCL0ALibn3KbvcFsDgSE.roa
File: PvCPK3GiCL0ALibn3KbvcFsDgSE.roa (raw, json)
Hash identifier: tpaJwkuPrVkJ3baRNqsURqkjwfhC6WHlZ2+PcQm/g9o=
Subject key identifier: 3E:F0:8F:2B:71:A2:08:BD:00:2E:26:E7:DC:A6:EF:70:5B:03:81:21
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A048E92190A4F567A6B8724209F424D8C1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PvCPK3GiCL0ALibn3KbvcFsDgSE.roa
Signing time: Fri 28 Aug 2026 15:07:13 +0000
ROA not before: Fri 28 Aug 2026 15:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274849
IP address blocks: 153.51.200.0/22 maxlen: 22
153.51.200.0/23 maxlen: 23
153.51.200.0/24 maxlen: 24
153.51.201.0/24 maxlen: 24
153.51.202.0/23 maxlen: 23
153.51.202.0/24 maxlen: 24
153.51.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:e9:21:90:a4:f5:67:a6:b8:72:42:09:f4:24:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 28 15:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ef08f2b71a208bd002e26e7dca6ef705b038121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9c:0e:48:4a:ef:85:14:0c:77:dc:26:25:3d:
26:1d:ae:00:64:05:e9:47:2c:e6:a2:84:3f:73:79:
62:50:de:d4:d9:23:10:9c:4e:65:6e:20:cd:15:14:
59:c4:cb:87:17:e9:a3:76:c8:f4:9d:e5:66:2b:00:
cf:b1:a9:b7:15:81:80:e5:ee:90:43:5b:21:ac:71:
2f:bc:80:b6:36:6d:18:70:eb:ad:2f:b5:ba:8f:03:
39:85:38:31:1d:ea:84:71:4e:fa:c9:81:5d:40:e8:
70:eb:f1:07:4a:da:2f:45:55:e8:5b:25:60:50:b8:
bc:2d:15:d3:72:04:ee:69:be:4c:45:11:3a:16:f9:
22:cc:0a:b5:24:ca:51:a2:7f:fa:af:b4:18:3f:95:
fa:9d:14:78:b2:44:69:bf:08:fc:b3:43:82:6e:12:
bf:5f:25:18:ab:be:00:c9:6a:72:3e:64:87:52:4c:
bb:32:4a:6d:88:90:1d:7b:56:82:a9:e9:66:76:20:
e4:8a:c6:dc:78:23:50:0e:8b:41:64:c3:3c:42:33:
0a:50:64:31:44:d1:d6:02:47:ee:8e:1e:ad:13:31:
e6:1d:e3:b5:62:f6:02:2a:9d:15:17:df:e4:34:a5:
67:d9:0f:ab:78:10:db:0d:2d:8e:26:f0:84:a3:a6:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F0:8F:2B:71:A2:08:BD:00:2E:26:E7:DC:A6:EF:70:5B:03:81:21
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/PvCPK3GiCL0ALibn3KbvcFsDgSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.200.0/22
Signature Algorithm: sha256WithRSAEncryption
75:27:a2:7f:03:35:82:57:65:7a:8f:61:cd:99:dd:95:27:b0:
13:a5:39:e6:82:78:3b:a3:e6:d2:e3:26:ee:24:b4:3c:48:eb:
07:03:3c:5c:81:93:b0:0c:d4:98:c1:32:83:f8:c7:e7:a1:5a:
35:b8:b9:f3:7d:49:e9:19:ac:08:4b:d6:ec:48:2e:43:70:47:
58:ac:74:d7:27:b8:18:b4:59:40:83:64:58:62:d7:2c:f4:ae:
5c:cf:e1:97:57:a9:a7:16:5c:27:a1:eb:fa:c8:a6:69:a3:24:
63:a6:07:6a:bd:7e:c0:38:24:56:ff:29:1e:20:df:16:24:5d:
60:23:f1:5e:3f:46:c1:e1:1f:22:54:7d:ac:e7:36:4f:e3:7a:
5d:d5:cb:43:31:38:be:4b:d6:27:fb:34:ca:1a:62:52:60:35:
a3:bf:5b:ec:80:62:f6:b1:5d:6d:24:61:03:7c:e3:75:63:48:
5b:50:b6:18:68:d3:54:ee:d5:1b:a2:34:26:38:3f:5d:3a:90:
4b:1f:14:e8:84:09:a7:af:a3:8f:85:3a:fa:a5:65:b8:d0:a0:
f9:2c:23:3b:c5:0e:44:66:4d:eb:08:af:cd:17:0e:c7:64:ff:
11:49:80:5b:43:05:76:62:de:b7:fd:3c:03:95:af:2e:76:f8:
a8:f6:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:01 2026 by rpki-client